Practice Test 2 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
An organisation is looking to utilize GCP for managing its resources for key departments such as Finance, Research, Technology, and Sales. You have been accessed to architect a solution that can help with separation of duties when it comes to assigning permissions to carry out certain tasks ensuring principle of least privilege. Which of the following solutions is most effective and scalable for this?
A. Google groups to group members of departments, and Folders for the different department with the relevant predefined IAM roles assigned to the groups at Folder level.
B. Projects for the different departments and predefined IAM roles assigned to the google account for individual users at project level.
C. Google groups to group members of departments, and Folders for the different department with the relevant custom IAM roles assigned to the groups at Folder level.
D. Projects for the different departments and custom IAM roles assigned to the google account for individual users at project level.
Answer: C
Option A is incorrect because it doesn’t follow the principle of least privilege using predefined roles usually gives more permissions than is needed. Although using google groups to manage members and Folders for departments (which could have multiple projects) is effective and scalable
Option B is incorrect because it doesn’t follow the principle of least privilege using predefined roles usually gives more permissions than is needed. Also using individual google accounts is cumbersome to manage and does not scale well.
Option C is correct using google groups to manage members and Folders for departments (which could have multiple projects) is effective and scalable. Also using custom IAM roles follows the principle of least privilege.
Option D is incorrect because using individual google accounts is cumbersome to manage and does not scale well.
See https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy for more information on Resource Hierarchy
Comments are closed, but trackbacks and pingbacks are open.